nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Bamboo and CVE-2018-1327, for Apache Struts Vulnerability?

Bamboo and CVE-2018-1327, for Apache Struts Vulnerability? I see other posts where Bamboo is not susceptible to several of the Apache Struts vulns, but just want to confirm this particular CVE also. Thanks. We are using Nexpose as our security scanner.

Accepted answers

Gonchik Tsymzhitov

Hi @Brian Hecko

As I read from here . CVE related DoS attacks from XStream library for version < 2.5.16

Have you checked on latest version of the Bamboo

https://confluence.atlassian.com/bamboo/bamboo-6-7-release-notes-959795979.html ?

As I see latest version should not be affected, because Atlassian upgraded to 2.5.17 Struts

Reference:

https://jira.atlassian.com/browse/BAM-20051

Cheers,

Gonchik Tsymzhitov

Alexey Chystoprudov

Bamboo doesn't use Struts REST plugin so it's not affected

All comments

Gonchik Tsymzhitov

Hi @Brian Hecko

As I read from here . CVE related DoS attacks from XStream library for version < 2.5.16

Have you checked on latest version of the Bamboo

https://confluence.atlassian.com/bamboo/bamboo-6-7-release-notes-959795979.html ?

As I see latest version should not be affected, because Atlassian upgraded to 2.5.17 Struts

Reference:

https://jira.atlassian.com/browse/BAM-20051

Cheers,

Gonchik Tsymzhitov

Alexey Chystoprudov

Bamboo doesn't use Struts REST plugin so it's not affected

Gonchik Tsymzhitov

@Alexey Chystoprudov

Thanks for your answer : )

Thanks for the reply and info, much appreciated.

Ah, will look into upgrading to 6.7 soon. Just finished upgrading to 6.6.3 recently.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

bamboo